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SPECIFICATION 

COMPUTER SYSTEM AND USAGE METHOD THEREOF 

FIELD OF THE INVENTION 

The present invention relates to a verification system for verifying whether or 
not recoding mediums such as optical disks are being used in an unauthorized manner. 

BACKGROUND OF THE INVENTION 

Computers that are loaded with and use optical disks can execute various types 
of programs. One type of such computer is an entertainment system, use of which is 
represented by use as game apparatuses. With such an entertainment system, the user 
purchases an optical disk storing game programs, and executes the game. Also, 
recently, there is being planned an arrangement wherein entertainment systems are 
connected via network with contents servers storing a great number of game programs, 
so users can download and purchase game programs via the network. 

There may be cases wherein a purchased optical disk or an optical disk storing 
downloaded programs is used in an unauthorized manner. That is to say, there may be 
cases wherein optical disks storing downloaded programs are copied in an unauthorized 
manner, or resold as secondhand items without permission of the copyright holder of the 
program. If this situation is left unremedied, copyright holders cannot collect their just 
profits, leading to lessened motivation for creating programs. 



SUMMARY OF THE INVENTION 

The present invention has been made in light of such problems, and 
accordingly, it is an object thereof to provide a computer system having a verification 



system for verifying whether or not optical disks are being used in an unauthorized 
manner. 

Another object of the present invention is to provide a method for using a 
computer system having a verification system for verifying whether or not optical disks 
are being used in an unauthorized manner. 

To this end, in one aspect of the present invention, there is provided a network 
system comprising: a first information processing apparatus (e.g. an entertainment 
apparatus) capable of being mounted with a first recording medium (e.g. an optical 
disk); and a second information processing apparatus (e.g. an authentication server) 
capable of being connected to the first information processing apparatus via a network; 
wherein the second information processing apparatus is operative to receive, from the 
first information processing apparatus, unique information (e.g. an apparatus ID) 
relating to the first information processing apparatus and unique information (e.g. a disk 
ID) relating to the first recording medium, and further the second information 
processing apparatus is operative to make reference to each of said received unique 
information and also to information within a database which is included in, or 
connected to, the second information processing apparatus and capable of accumulating, 
erasing and so on of information, thereby to perform verification of the recording 
medium. 

The second information processing apparatus may further enable the database 
to accumulate either of the unique information relating to the first information 
processing apparatus or the unique information relating to the first recording medium. 

The second information processing apparatus may further enable the database 
to accumulate both of the unique information relating to the first information processing 
apparatus and the unique information relating to the first recording medium. 

The information within the database may comprise either of the unique 



information relating to the first information processing apparatus or the unique 
information relating to the first recording medium, which is pre-recorded in the 
database. 

The information within the database may comprise both of the unique 
information relating to the first information processing apparatus and the unique 
information relating to the first recording medium, which are pre-recorded in the 
database. 

The information within the database may be updated to newly accumulated 
information. 

Whenever unauthorized usage of the recording medium occurs, either of the 
unique information relating to the first information processing apparatus or the unique 
information relating to the first recording medium may be accumulated in the database. 

The second information processing apparatus may further enable or disable 
processing to be performed in the first information processing apparatus. 

The second information processing apparatus may further enable or disable the 
first information processing apparatus to read out a program stored in the first recording 
medium. 

The second information processing apparatus may be operative to transmit a 
permission signal for enabling processing to be performed by the first information 
processing apparatus or an inhibit signal for disabling processing to be performed by the 
first information processing apparatus. 

If the results of the reference made by the second information processing 
apparatus indicates that information corresponding to the unique information relating to 
the first recording medium is accumulated in the database, then the processing to be 
performed by the first information processing apparatus may be enabled. 

The unique information relating to the first information processing apparatus 
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and the unique information relating to the first recording medium may be accumulated 
as interrelated information in the database, wherein if the results of the reference made 
by the second information processing apparatus indicates that the unique information 
relating to the first information processing apparatus and the unique information relating 
5 to the first recording medium, received by the second information processing apparatus, 
match with the interrelated information in the database, then the processing to be 
performed by the first information processing apparatus may be enabled. 

An encrypted program may be stored in the first recording medium, wherein 
the second information processing apparatus may be operative to transmit information 

2 10 for decrypting the program in the first recording medium that is encrypted by the first 
information processing apparatus, thereby to enable reading of the first recording 
medium by the first information processing apparatus. 

4 The information for decrypting may comprise a decryption key. 

g In one embodiment of the invention, the network system further includes a 

Til 5 third information processing apparatus capable of being mounted with a second 
recording medium (e.g. an optical disk) different from the first recording medium, 
wherein the second information processing apparatus may be operative to receive 
unique information relating to the second recording medium from the third information 
processing apparatus, after receipt of the unique information relating to the first 
20 recording medium from the first information processing apparatus. 

The second information processing apparatus may be operative to make 
reference to the unique information relating to the first recording medium received from 
the first information processing apparatus and the unique information relating to the 
second recording medium received from the third information processing apparatus, and 
25 further if the same unique information as made reference to by the second information 
processing apparatus occur simultaneously, the second information processing apparatus 



5 

may enable or disable the third information processing apparatus (e.g. other 
entertainment apparatus) to read out a program stored in the second recording medium. 

The second information processing apparatus may be operative to transmit, to 
the first information processing apparatus, information for confirmation of whether 
5 execution processing of the second recording medium to be performed in the third 
information processing apparatus is allowed or not. 

The second information processing apparatus may be operative to allow the 
third information processing apparatus to perform the execution processing of the 
second recording medium, when it has received execution allowance information from 

□ 10 the first information processing apparatus responding to the confirmation information. 

ff j In one embodiment of the present network system, the first information 

processing apparatus is further capable of being mounted with a third recording medium 
(e.g. memory card), wherein the second information processing apparatus may be 
operative to transmit the unique information relating to the first information processing 

f il5 apparatus and the unique information relating to the first recording medium to the first 
information processing apparatus after it has received each of said unique information 
from the first information processing apparatus, and then the first information 
processing apparatus may enable the second recording medium to store each of said 
unique information. 

20 The first information processing apparatus may make reference to the unique 

information relating to the first recording medium as well as information stored in the 

second recording medium. 

If the results of the reference made by the first information processing 

apparatus indicates that information corresponding to the unique information relating to 
25 the first recording medium is stored in the second recording medium, then the 

processing to be performed by the first information processing apparatus may be 
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enabled. 

In accordance with another aspect of the present invention, there is provided a 
network system comprising: a first information processing apparatus capable of being 
mounted with a first recording medium; a second information processing apparatus 
5 capable of being mounted with a first recording medium; and a third information 
processing apparatus capable of being connected to the first and second information 
processing apparatus via a network; wherein the third information processing apparatus 
is operative to receive, from the first and second information processing apparatus, 
unique information relating to the first recording medium and unique information 
10 relating to the second recording medium, respectively, and further the third information 
processing apparatus is operative to make reference to the unique information relating to 
the first recording medium and the unique information relating to the second recording 
medium, and then if the same unique information as made reference to by the third 
information processing apparatus occur simultaneously, the third information processing 
1 5 apparatus may enable or disable the second information processing apparatus to read out 
a program stored in the second recording medium 

In one embodiment of the present network system, unique information relating 
to respective information processing apparatus is an apparatus ID. 

In one embodiment of the present network system, unique information relating 
20 to respective information processing apparatus is a user ID. 

In one embodiment of the present network system, the unique information 
relating to respective recording medium is a disk ID. 

In one embodiment of the present network system, the recording medium 
storing the application programs is an optical disk, and the unique information relating 
25 to said recording medium is a disk ID. 

The disk ID may be recorded in a region within a data area or a region other 
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than the data area of the optical disk. 

The disk ID may be detected by a computer based on an address of disk ID 
data recorded in a data area of the optical disk. 

The disk ID may be recorded in the disk with an organic coloring matter. 
5 The disk ID may be formed with a method using physical changes in pit rows. 

The method using physical changes in pit rows may use one of change in 
radical direction of pit rows, change in the minor axis direction of pit size, and change 
in the depth direction of pits. 

The disk ID may be formed with a method using electronic watermarking. 
1 o In accordance with a further aspect of the present invention, there is provided a 

method of performing verification of a recording medium by utilizing a network system, 
wherein said system comprises a first information processing apparatus capable of being 
mounted with a first recording medium, and a second information processing apparatus 
capable of being connected to the first information processing apparatus via a network, 
15 said method comprising the steps of: using the second information processing apparatus 
to receive, from the first information processing apparatus, unique information relating 
to the first information processing apparatus and unique information relating to the first 
recording medium; and using the second information processing apparatus to make 
reference to each of said received unique information and also to information within a 
20 database which is included in, or connected to, the second information processing 
apparatus and capable of accumulating, erasing and so on of information, whereby 
verification of the recording medium is performed. 

In accordance with another aspect of the present invention, there is provided a 
first information processing apparatus capable of being mounted with a first recording 
25 medium, wherein the first information processing apparatus is capable of being 
connected to a second information processing apparatus via a network, and further the 
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first information processing apparatus is operative to transmit, to the second information 
processing apparatus, unique information relating to the first information processing 
apparatus and unique information relating to the first recording medium, whereby the 
recording medium is verified by making reference to each of said transmitted 
5 information and also to information within a database which is included in, or 
connected to, the second information processing apparatus and capable of accumulating, 
erasing and so on of information. 

In accordance with another aspect of the present invention, there is provided a 
second information processing apparatus capable of being connected through a network 

10 to a first information processing apparatus capable of being mounted with a first 
recording medium, wherein the second information processing apparatus is operative to 
receive, from the first information processing apparatus, unique information relating to 
the first information processing apparatus and unique information relating to the first 
recording medium, and then to make reference to each of said received unique 

15 information and also to information within a database which is included in, or 
connected to, the second information processing apparatus and capable of accumulating, 
erasing and so on of information, thereby to perform verification of the recording 
medium. 

In accordance with another aspect of the present invention, there is provided a 
20 recording medium capable of being executed by a second information processing 
apparatus which is connected through a network to a first information processing 
apparatus capable of being mounted with a first recording medium, wherein the 
recording medium stores a program capable of being read and executed by the second 
information processing apparatus, and wherein the program comprises the steps of; 
25 receiving, from the first information processing apparatus, unique information relating 
to the first information processing apparatus and unique information relating to the first 
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recording medium; and making reference to each of said received unique information 
and also to information within a database which is included in, or connected to, the 
second information processing apparatus and capable of accumulating, erasing and so 
on of information, thereby to perform verification of the recording medium. 
5 In accordance with another aspect of the present invention, there is provided a 

recording medium capable of being executed by a first information processing apparatus 
which is capable of being mounted with a first recording medium and further capable of 
being connected to a second information processing apparatus via a network, wherein 
the recording medium stores a program capable of being read and executed by the first 

310 information processing apparatus, and wherein the program comprises the steps of: 
transmitting, to the second information processing apparatus, unique information 
relating to the first information processing apparatus and unique information relating to 
the first recording medium; and making reference to each of said transmitted unique 
information and also to information within a database which is included in, or 

"15 connected to 5 the second information processing apparatus and capable of accumulating, 
erasing and so on of information, thereby to perform verification of the recording 

U medium. 

In accordance with another aspect of the present invention, there is provided a 
program capable of being executed by a second information processing apparatus which 

20 is connected through a network to a first information processing apparatus capable of 
being mounted with a first recording medium, wherein the program is capable of being 
read and executed by the second information processing apparatus, and wherein the 
program comprises the steps of: receiving, from the first information processing 
apparatus, unique information relating to the first information processing apparatus and 

25 unique information relating to the first recording medium; and making reference to each 
of said received unique information and also to information within a database which is 
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included in, or connected to, the second information processing apparatus and capable 
of accumulating, erasing and so on of information, thereby to perform verification of the 
recording medium. 

In accordance with another aspect of the present invention, there is provided a 
program capable of being executed by a first information processing apparatus which is 
capable of being mounted with a first recording medium and further capable of being 
connected to a second information processing apparatus via a network, wherein the 
program is capable of being read and executed by the first information processing 
apparatus, and wherein the program comprises the steps of: transmitting, to the second 
information processing apparatus, unique information relating to the first information 
processing apparatus and unique information relating to the first recording medium; and 
making reference to each of said transmitted unique information and also to information 
within a database which is included in, or connected to, the second information 
processing apparatus and capable of accumulating, erasing and so on of information, 
thereby to perform verification of the recording medium. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a diagram describing a disk ID verification system; 

Fig. 2 is a diagram illustrating the configuration of the entertainment apparatus 
main unit shown in Fig. 1; 

Fig. 3 is a flowchart of the processing at the apparatus main unit side in a first 
disk ID verification method; 

Fig. 4 is a flowchart of the processing at the authentication server side in a first 
disk ID verification method; 

Fig. 5 is a flowchart of the processing at the apparatus main unit side in a 
second disk ID verification method; 
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Fig. 6 is a flowchart of the processing at the authentication server side in a 
second disk ID verification method; and 

Fig. 7 is a table illustrating the results of comparison between a disk ID and 
device ID received by an authentication server, and user information accumulated in a 
5 user database beforehand. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Embodiments of the present invention will now be described with reference to 
the attached drawings. 
1 0 [Disk verification system] 
(Overall system) 

Fig. 1 is a conceptual diagram of the overall disk verification system according 
to the present embodiment. As shown in Fig. 1, a user terminal device 1 is connected 
with an authentication server 4 via a network 3. The authentication server 4 is 

15 connected to one, two, or more contents servers 6 via the network 3. At least one of 
the contents servers 6 may be a dedicated debugging server 6-4. 

The user terminal device 1 is a computer capable of being mounted with an 
optical disk 2 storing application programs, such as a CD-ROM (Compact Disk 
Read-Only Memory), DVD-ROM (Digital Versatile Disk-ROM), or the like. The 

20 present embodiment will be described with reference to an entertainment system 
represented by a game device or the like, as an example of the computer. The user 
terminal device 1 is the entertainment apparatus main unit 1 here, and the internal 
configuration of the entertainment apparatus main unit will be described later with 
reference to Fig. 2. Note that the optical disk 2 is only an example, and the present 

25 invention is not restricted to this; rather, all types of recording media storing contents 
such as application programs are encompassed therein. For example in the event that 
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contents such as application programs are stored in an externally-connected hard disk 
(not shown), in a memory card connected to a later-described connector, in the memory 
of a PDA, or the like, these are encompassed as well. However, this description will 
be made with the example of an optical disk 2 to facilitate explanation. 

Preferably used as the network 3 is a so-called broadband network, such as a 
television cable network, optical fiber network, xDSL (x Digital Subscriber Line), or the 
like. Also, already-existing or yet-to-be-constructed wide-area wireless networks, 
telephone-related networks for cellular telephones or PHS (Personal Handiphone 
System) telephones, Internet-related networks, etc., may be used as well. 

The authentication server 4 is a server that is connected to the entertainment 
apparatus 1 and is used for verifying the entertainment apparatus 1 and the recording 
medium 2 are true or false. The authentication server 4 has a user database 5 storing 
device ID (also referred to as SET ID) information of unique IDs given to each of the 
entertainment apparatus main units 1 , user ID (also referred to as USER ID) information 
(which may include passwords) of unique IDs given to each of the users, and disk IDs 
of unique IDs given to each of the optical disks 2and the like. These IDs are each 
completely unique, and no two IDs are the same. Particularly, the disk ID is a different 
identification symbol appropriated to each optical disk. 

Also, the contents servers 6 each have databases storing various types of digital 
contents which can be provided to users. 

Further, the entertainment apparatus 1 may be used in place of the 
authentication server 4. In other words, a particular one of a plurality of 
interconnected entertainment apparatus may be used to function as an authentication 
server. In such case, a database 5 to be connected to this particular apparatus may be 
comprised of a hard disk. 
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(Internal Configuration of apparatus main unit) 

Fig. 2 is a block diagram of the internal configuration of an entertainment 
system apparatus main unit used as the user terminal shown in Fig. 1 . In the diagram, 
within the single-dotted broken line is the entertainment apparatus main unit 1, and 
5 within the dotted line is the disk drive unit 30 of the entertainment apparatus main unit 
1. 

The entertainment apparatus main unit 1 has a CPU 16, and the CPU 16 is 
connected with a main memory (RAM) 17. The CPU 16 is also connected with a 
graphics drawing device (GPU) 18, and picture signals from the GPU 18 are output to a 

10 display device (CRT) via a CRT-CTR (Cathode Ray Tube Controller) not shown in the 
drawings. Also, the CPU 16 is connected to a connector (controller (PAD) / PDA 
(Personal Digital Assistant / memory card connector) 12 via an IOP (Input/Output 
Processor) 13 having a USB (Universal Serial Bus) connector 14, an IEEE 1394 or 
i.LINK(R) connector 15, etc. 

15 Connected to the connector 12 are a memory card 1 1, a controller (PAD) 10, a 

portable terminal device (PDA: Personal Digital Assistant), and so forth. The memory 
card 1 1 or PDA or the like is a type of external storage device, with disk ID, device ID, 
etc., stored therein, as described later. 

Also, the CPU 16 is connected to a bus 27 via an IOP 13, with a MASK-ROM 

20 (Masked ROM) 19, a CD/DVD-DSP (CD/DVD Digital Signal Processor) 22, a DVD 
player ROM 20, an SPU (Sound Processing Unit) 25, a network interface 26, etc., 
connected to the bus 27. Audio signals from the SPU 25 are output to an amplifier, 
speaker, etc., which are not shown. The entertainment apparatus main unit 1 is 
connected to the network via the network interface 26, USB connector, 14 i.LINK(R) 

25 connector 15, etc., and further is connected to the authentication server 4, digital 
contents servers 6, etc., via the network. 
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The CD/DVD-DSP 22 performs mechanical control of the disk drive unit 30, 
via a mechanical control unit 23 and driver 24. This control is made through an 
RF-AMP (Radio Frequency Amplifier) 21. Also, the CD/DVD-DSP 22 performs 
electrical control of the disk drive unit 30 via the RF-AMP 21 . 
5 The optical disk 2 is rotated by mechanical control of a spindle motor (not 

shown). Also, a pick-up lens (not shown) is driven by electrical control of an actuator 
(not shown) so as to record to and play information from the optical disk 2. 

The entertainment apparatus 1 has an apparatus ID as its unique ID (such as 
manufacture serial number). The apparatus ID may be either installed in a form of 
1 0 hardware, as by embedding into a mask ROM 19 beforehand, or read in later by use of 
software through an optical disk 2, portable terminal device, controller 10 or the like. 

Also, a disk ID is stored in the optical disk 2, and this disk ID is read by a 
later-described method. 

1 5 [Disk ID verification systems] 

(First Disk ID Verification System) 

The following is a specific description of the processing at the entertainment 
apparatus main unit side according to the first disk ID verification system, with 
reference to Fig. 3, and a specific description of the processing at the authentication 

20 server 4 side thereof, with reference to Fig. 4. Note that with the present embodiment, 
the entertainment system is a game apparatus, using an optical disk (e.g. a CD-ROM) as 
a recording medium storing game programs, and the disk ID is assumed to exist at an 
area other than the normal data area (e.g., on the inner side of the read-in area, on the 
outer side of the read-out area, etc.). 

25 Fig. 3 illustrates the processing at the entertainment apparatus main unit side. 

The basic processing at the entertainment apparatus main unit side will first be 
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described. With the optical disk used here, the disk ID is recorded in an area which is 
not normally the object of recording data. Information for distinguishing the position 
where the disk ID is recorded (e.g., an address) is recorded in the normal data area. An 
example of material used for writing the disk ID to the optical disk 2 is an organic 
5 coloring matter used with write-once optical disks. Hie entertainment apparatus main 
unit 1 reads the disk information, finds the address where the disk ID is recorded there, 
further reads the disk ID following this address, and transmits the disk ID to the 
authentication server 4. This will now be described in detail. 

In step S 1 02, the entertainment apparatus main unit 1 reads in the basic data of 
□ 10 the TOC (Table of Contents) from the loaded CD-ROM, under the control of the CPU. 
m In step SI 03, the volume identifier VD (Volume Description) for the data area of the 
!e CD-ROM is read in, and the entertainment apparatus main unit 1 searches for an 
address describing the disk ID. 

In step S104, judgment is made regarding whether or not the address of the 
h 15 disk ID exists in the volume identifier VD. In the event that the ID address does not 
exist, judgment is made that the loaded CD-ROM is not subject to protection by the disk 
FU ID verification system, the flow proceeds to step SI 13, and the program is executed. 
The entertainment apparatus main unit 1 also functions as a music CD player, movie 
DVD player, etc., and is not restricted to functioning as a gaming device. Accordingly, 
20 optical disks not subject to protection by the disk ID verification system (e.g., 
DVD-video disks, audio CDs, conventional game CDs) may be loaded on the 
entertainment apparatus main unit 1, and in such cases, the music or pictures are played, 
the game is executed, and so forth, in a straightforward manner. 

In the event that the ID address exists in the volume identifier VD, in step S105, 
25 the pick-up of the optical disk drive unit 30 is slid toward the disk ID data portion of the 
CD-ROM (the portion provided on the inner side of the read-in area or on the outer side 
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of the read-out area), following the ID address, in order to read the disk ID. Control of 
the sliding of the pick-up is performed by a mechanical control unit 23, based on slide 
control output from the CPU 16. 

In step SI 06, the CPU 16 judges whether or not disk ID information actually 
exists at the disk ID data portion on the CD-ROM. In the event that disk ID 
information does not exist or in the event that the disk ID information cannot be read, 
judgment of no disk ID is passed, and the flow proceeds to step SI 07, In step SI 07, 
execution of the program is rejected, and is force-quit. 

In the event that disk ID information actually exists at the disk ID data portion, 
in step SI 08 the entertainment apparatus main unit 1 reads the disk ID information 
under the control of the CPU, and stores this in the main memory 17. 

In step SI 09, the CPU 16 of the entertainment apparatus main unit 1 transmits 
the disk ID data to the authentication server 4, via various types of communication 
interfaces in accordance with standards such as USB, IEEE (Institute of Electrical and 
Electronic Engineers) 1394, PCMCIA (Personal Computer Memory Card International 
Association Architecture), or the like. Then, in step SI 10, the flow waits for the 
authentication server to perform verification processing for the transmitted disk ID. 

In step S 1 1 1 , the entertainment apparatus main unit 1 receives the results of the 
verification processing at the authentication server. In the event that the results of the 
verification processing at the authentication server are "Verified", a CD-ROM 
read-permitted command is received. In the event that the results of the verification 
processing at the host server are "Not verified", the flow proceeds to step SI 12, and 
execution of the program is rejected and is force-quit 

In the event that the results of the verification processing at the authentication 
server are "Verified", in step SI 13 the CPU of the entertainment apparatus main unit 1 
executes the program stored in the CD-ROM. 
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Fig. 4 illustrates the processing at the authentication server 4 side in the first 
disk ID verification system according to the present embodiment. The basic 
processing at the authentication server 4 will first be described. A user who has 
purchased an entertainment apparatus main unit has registered user ID such as his/her 
own name, and a device ID appropriated to each apparatus main unit, with the user 
database 5 of the authentication server 4, immediately after making the purchase. Also, 
a user who has purchased a new game program must transmit the disk ID information at 
the time of the first use thereof to the user database 5 of the authentication server 4, or 
the program cannot be executed (see step SI 09). Accordingly, at least disk IDs is 
stored in the user database 5 of the authentication server 4 as user information, further 
any of user ID, device ID and the like, each associated therewith, may be stored therein. 
In the event that a user purchases multiple types of game programs, there will be at 
least , further may be . The user information is tabulated and is accumulated in the 
user database 5. 

In the event of a user starting a game under such conditions, disk ID and device 
ID information of the disk and device used by the user is transmitted from the from the 
entertainment apparatus main unit 1 to the authentication server 4, and the 
authentication server 4 compares the received disk ID and device ID with user 
information stored in the user database. There are four possible results of this 
comparison, as shown in Fig. 7. 

No. 1: Both the disk ID and the device ID match that stored in the user 
database. 

No. 2: Only the disk ID matches. 

No. 3 : Only the device ID matches. 

No. 4: Neither the disk ID nor the device ID match. 

In the event that No. 1 is true, i.e., in the event that the combination of the disk 
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ID and the device ID that has been transmitted matches the disk ID and the device ID 
already registered in the user database, judgment is passed that the disk is a valid disk. 
However, there is the possibility that, in rare cases, the device ID may be copied 
unauthorized, and also the disk ID may be copied unauthorized. In order to eliminate 
such cases, in the event that verification requests for the same disk ID and device ID 
combination occur in the same time period, this is judged to be unauthorized use, so the 
number of times of unauthorized use is counted and recorded in the user database 5, and 
execution of the program is rejected. 

In the event that No. 2 is true, i.e., in the event that of the combination of the 
disk ID and the device ID that have been transmitted, only the disk ID matches the disk 
ID registered in the user database, the following three possibilities exist. 

(1) The owner of the disk lent the disk to another individual. 

(2) The owner of the disk executed the disk on another individual's apparatus. 

(3) An unauthorized copy. 

Which of these three is true can be discerned by prompting the user of the 
device ID registered along with the disk ID for confirmation. This entertainment 
system is capable of such a confirmation task since each of the entertainment apparatus 
main units 1 are connected to the authentication server 4. 

In the event that No. 3 or No. 4 is true, i.e., in the event that of the combination 
of the disk ID and the device ID that have been transmitted the disk ID is unregistered, 
judgment is made that this is the first time the disk 2 is being used, and the disk ID is 
registered in the user database 5. This will be described in detail. 

In step S202, the authentication server 4 performs connection verification with 
regard to the entertainment apparatus main unit 1 which the user uses. In the event 
that the device ID of the apparatus main unit 1 is automatically supplied to the server 4 
as part of the transmission data from the apparatus main unit 1, all that is necessary for 
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the user is to enter the password which is the user ID. In the event that connection 
verification fails, in step S203, the connection between the user terminal device and the 
authentication server 4 is cut off. In the event that the connection verification is 
successful, the communication connection between the apparatus main unit 1 of the user 
5 and the server 4 is established in step S204. 

In step S205, the authentication server 4 receives the disk ID data and device 
ID from the entertainment apparatus main unit 1 . This is processing corresponding to 
stepS109inFig, 3. 

In step S206, the authentication server 4 compares the received disk ID and 
10 device ID with the user information (disk ID and device ID) recorded in the user 
database 5. 

In step S207, judgment is made regarding whether or not the received disk ED 
matches the disk ID registered in the database 5. That is to say, in the event that the 
received disk ID is not in the table in the user database, the disk is being used for the 
1 5 first time. In this case, the flow proceeds to step S208, where the authentication server 
4 performs registration of the disk ID to the database 5. Then, in step S212, a program 
execution permission command is transmitted to the entertainment apparatus main unit 
1. 

In the event that the transmitted disk ID has already been registered in the 
20 database, the flow proceeds to step S209, and judgment is made regarding whether or 
not the receiving device ID and the device ID of the device registered for using the disk 
with the disk ID match. In the event that the device IDs do not match, the flow 
proceeds to step S210, and confirmation for usage permission is made with the user of 
the device ID corresponding to the disk ID (i.e., the owner of the disk). In step S211, 
25 in the event that the disk owner grants permission (i.e., in the event that the disk owner 
returns a transmission to the server 4 to the effect of permitting use of the disk), this 
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means that the disk owner has lent his/her own disk to another individual, or is 
executing the disk using another entertainment apparatus main unit 1, and in step S212, 
a program execution permission command is transmitted to the entertainment apparatus 
main unit 1. 

5 In the event that the disk owner does not consent, this is judges as a case of 

unauthorized use, so the number of times of unauthorized use is counted in step S214, 
and a program execution rejection command is transmitted to the entertainment 
apparatus main unit in step S215. Thus, unauthorized use of secondhand articles and 
the like can be eliminated. 

10 Even in the event that the combination of the disk ID and the device ID match 

the user information registered in the user database 5, the rare cases wherein both IDs 
have been copied in an unauthorized manner must be eliminated. In step S213, 
judgment is made regarding whether or not use of the same disk ID and device ID 
combination is occurring in the same time period. In the event that simultaneous use is 

15 not occurring, a program execution permission command is transmitted to the 
entertainment apparatus main unit 1 in step S212. In the event that simultaneous use is 
occurring, this is judged to be unauthorized use, so the number of times of unauthorized 
usage is counted in step S212, and a program execution rejection command is 
transmitted to the entertainment apparatus main unit in step S21 5. 

20 Normally, unauthorized disks are complete copies of the contents of genuine 

disks, so the address data of the disk ID registered in the data area is also copied. 
However, with the format according to the present embodiment, the ID information is 
recorded at a location other than the data area such as on the inner side of the read-in 
area or on the outer side of the read-out area or so forth, so that the ID is not copied onto 

25 an unauthorized disk even if a genuine disk is copied onto the unauthorized as it is. 
Thus, the disk ID itself does not exist on the unauthorized disk even though information 
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relating to the address of the disk ID has been copied, so that execution of programs on 
unauthorized disks in step S107 can be eliminated by judging in step S104 in Fig. 3 that 
the address of the disk ID does exist, and then judging in step S106 that the disk ID 
itself does not exist. 

5 The method for recording the disk ID is not restricted to the above-described. 

For example, the disk ID may be formed with a method using physical changes in pit 
rows within the data area. The method using physical changes in pit rows may use one 
of change in radial direction of pit rows (wobbling), change in the minor axis direction 
of pit size, and change in the depth direction of pits. Or, the disk ID may be formed 

1 0 with a method using electronic watermarking (digital watermarking). 

The method for registering the disk ID to the authentication server is not 
restricted to the above-described methods. Also, there are special cases wherein an 
disk supplier may itself provide an authentication server 4, for example, as only one 
manufacturer. In such a case, the disk IDs of the disks which the provider 

15 manufactures and provides can be registered and stored in the database 5 of the host 
server 4 beforehand. In such cases, the process for registering the disk ID at the initial 
time of use is not necessary with the first disk ID verification system. 

Also, a device ID is not necessarily needed. The device ID can be replaced 
with user IDs unique to each user. That is, instead of distinguishing the device used, 

20 the user is distinguished, and the verification system can be made to function with the 
combination of user ID and disk ID. In this case, the user ID is preferably 
appropriated in the form of a password. 

Now described below are cases wherein a disk supplier itself provides an authentication 
server 4. 

25 Upon manufacturing disks, the disk supplier gives one individual manufacture 

serial number to each disk and installs the number as disk ID information in each disk. 
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Concurrently, the disk ID (manufacture number) is recorded in the user database 5. On 
the other hand, one individual manufacture serial number is given to each entertainment 
apparatus and the number is installed as an apparatus ID in each apparatus. 
Concurrently, the apparatus ID (manufacture number) is recorded in the user database 5. 
5 In this case, when a disk 2 is shipped from the factory, the disk ID has not been 

related to the apparatus ID of an entertainment apparatus 1. 

A user of the disk 2 makes request for connect and verification processing to 
the authentication server 4 (SI 09), and then the authentication server 4 verifies the 
apparatus ID followed by verifying the disk ID. 
10 Since the apparatus ID, disk ID (user information) is pre-recorded in the user 

database 5, the authentication server 4 checks whether the apparatus ID - disk ID 
received from the entertainment apparatus 1 corresponds to the user information stored 
in the database. 

If the result indicates that nothing corresponds to the user information of the 
15 database, the verification processing is forcedly terminated and execution of the 
program stored in the disk 2 is rejected. Under these circumstances, accumulation of 
unauthorized ID's in the database 5 could make management of unauthorized disks such 
as count of the number of times that the authentication server 4 has been accessed by 
unauthorized disks, identification of the entertainment apparatus utilizing unauthorized 

20 disks, and so on. 

In addition of rejection of unauthorized disks, the network system of the 
present invention may advantageously utilize count of the number of times accessed by 
use of a disk 2 given with a disk ID. Especially, the system utilizes the number of 
times accessed to the authentication server 4 such that when access number excesses a 

25 predetermined value, the verification processing is forcedly terminated and execution of 
the program stored in the disk 2 is rejected. 
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For example, by managing the number of times accessed by use of a disk 2 
given with a disk ID, it is possible to provide a trial period during which a user is 
allowed to utilize contents such as the program stored in the disk 2. As the result, a 
user can enjoy games, services and so on using the contents such as programs stored in 
the dish for the trial period, i.e. until the disk 2 is utilized a predetermined number of 
times. 

Currently, in many types of trial versions of internet connection services 
software, a trial period is set so as to count time interval of utilization. According to 
the network system of the present invention, however, service management based on the 
number of times of utilization can be made rather than management based on time 
interval of utilization. 

For example, there is offered a service enabling download of music or pictures 
from a contents server 6 to an entertainment apparatus 1 through the authentication 
server 4. In this case, the disks 2 for utilizing the service are distributed from the 
service provider to users subscribing to the service. Each of the disks is stored with a 
disk ID given to that disk as well as a verification program, download execution and so 
on. By mounting the disk 2 into the entertainment apparatus 1, the user is allowed to 
connect to the authentication server 4 and the contents server 6, thereby to execute 
downloading of music, pictures and so on. 

On this occasion, if the authentication server 4 counts the number of times that 
download is executed as the number of times accessed by use of the disk given with the 
disk ID, limitation of access to the service can be realized depending on the number of 
times rather than the time interval of downloading (communication). 

Additionally, if items of contents accessed by each of the users is related to 
user information (apparatus ID, user ID, disk ID and so on) in the authentication server 
4 and then the resulting interrelation information is accumulated in the database 5, then 
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management of each user regarding user's preference and so on may be facilitated. By 
utilizing such accumulated information, the service provider or contents provider can 
provide appropriate advertisements and so on to respective individual users through a 
communication network such as Internet 
5 The above mentioned method for limiting utilization of service provision is 

based on the number of times that the service is utilized, but the present invention is not 
limited to this method. For example, the service provider may provide contents stored 
in the disk 2 given with the disk ED, with limitation depending on a sum of money 
collected from the user. Now, it is assumed that contents stored in the disk 2 are not 
wholly available, but partly. When the user wants to utilize the partly unavailable 
contents, the user has to pay the provider the money depending on contents to be 

B E utilized. Upon receipt of payment, the service provider permits utilization by the user. 

For example, if contents stored in a disk 2 is partly encrypted, a user that has 
not paid fee for utilization is not permitted to utilize the encrypted portion, whereas a 

fJLS user that paid the fee is permitted to utilize it with a key for decryption which is 
provided to the entertainment apparatus 1 from the service provider. Information sent 

^ from the service provider to the entertainment apparatus 1 is not limited to the 
decryption key. 

In order to utilize the partly unavailable contents stored in the disk 2, the user 
20 not only pay the fee for utilization to the service provider, but also, for example, the user 
may send the user ID to the authentication server 4 which is operated by the service 
provider. The user ID may be an ID given in advance to the user by the service 
provider. 

25 (Second disk ID verification system) 

Next, the second disk ID verification system will be described. With the 
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second disk ID verification system, the disk to be verified is not restricted to CD-ROMs, 
and includes DVD-ROMs and so forth without TOCs stipulated. Also, the place for 
recording the disk ID within the disk is not restricted, and may be anywhere on the inner 
side of the read-in area, on the outer side of the read-out area, or in the data area. 
5 In comparison with the above-described first disk verification system, with the 

first disk verification system, connection for verification was made with the server each 
time a program on the disk is activated for playing a game, but with this second disk 
verification system, the processing step of connecting to the server can be omitted by 
storing the user information in an external storage device which is connected to the 

10 main unit, such as a memory card 11 or the like. That is to say, at the first time of 
using the disk, the user information of the disk ID and device ID are recorded in the 
memory card 11 or the like at the first time of using the disk, and each time the user 
plays a game this user information is used to verify the disk. Note that contents such 
as application programs may be stored in the external storage device, as well. 

15 The processing at the entertainment apparatus main unit side according to the 

second disk ID verification system will be described in detail with reference to Fig. 5, 
and the contents of the processing at each of the steps at the authentication server 4 side 
will be described in detail with reference to Fig. 6. 

In step S302, under control of the CPU 16, the entertainment apparatus main 

20 unit 1 reads the basic unique data recorded in the loaded disk 2 into the main memory 
17. The loaded disk 2 may be a CD, CD-ROM, DVD-video, DVD-ROM, or other 
types of disks. 

In step S303, judgment is made regarding whether or not a disk ID exists 
within the basic data that has been read in. In the event that a disk ID does not exist, 
25 the disk is judged to be a disk that is not the object of verification, so the flow proceeds 
to step S3 12, and the program is executed. 
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In the event that a disk ID exists, the flow proceeds to step S304, and under the 
control of the CPU 16, user information (data of the combination of the disk ID and 
device ID) recorded in the external storage device such as the memory card 11 or the 
like connected to the entertainment apparatus main unit is read in. Note that this 
5 memory card 11 or the like also records game high-scores, back-up data of the progress 
of games ended partway through, and so forth. 

In step S305, judgment is made regarding whether or not the disk ID is 
recorded in the memory card 11. The disk ID and device ID are registered in the user 
information of the memory card 11 at the time of using the disk for the first time, so for 

10 second and subsequent uses, the disk ID will be registered in the memory card 11 as 
user information. Accordingly, cases wherein the disk ED is not recorded in the 
memory card 11 will included cases of (1) using the disk for the first time, (2) 
exchanging the memory card itself, and so forth. In the event that the read disk ID is 
recorded in the memory card or the like the flow proceeds to step S306. 

15 In step S3 06, judgment is made regarding whether or not the disk ID recorded 

in the memory card 1 1 or the like matches the disk ID of the loaded disk. In the event 
that these do not match, it may be that the disk is being used for the first time, or other 
cases may be considered. In the event that these match, the flow proceeds to step 
s307. 

20 In step S307, judgment is made regarding whether or not the device ID read in 

from the memory card 1 1 matches the device ID of the apparatus main unit currently 
being used. In the event that these do not match, cases that may be conceived include 
a case wherein a user has borrowed a disk 2 and memory card 11 from the owner 
thereof and is playing a game on his/her own apparatus. In the event that these match 

25 (i.e., in the event that the combination of the disk ID and device ID match the user 
information recorded in the memory card or the like at the time of purchasing the disk), 
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this qualifies as valid usage, so the user verification is completed, and the program is 
executed in step S3 1 2. 

In the event that the disk ID does not exist in the memory card in step S305, or 
in the event that the disk ID recorded in the memory card 11 or the like does not match 
5 the disk ID read in from the disk in step S306, or in step S307, in the event that the 
device ID recorded in the memory card 11 or the like does not match the device ID of 
the device being used, the flow proceeds to the step S308. In this step S308, the 
entertainment apparatus main unit transmits the disk ID, and the device ID data of the 
device being used to the authentication server 4 via a communication interface 
-ilO according to standards such as USB, IEEE 1394, PCMCIA, etc., and waits for user 
S verification in step S3 09. Subsequently, in the event that a command is received from 
ll the authentication server 4 to record the disk ID and device ID data in the memory card 
1 1 , the IDs are written thereto (corresponding to step S405 in Fig. 6). 

In step S3 10, whether or not to execute the program is determined based on the 
=45 results of the verification processing at the authentication server 4. In the event that 
i the results are "Not verified", the flow proceeds to step S3 11, and execution of the 
program is rejected and is force-quit. In the event that the results are "Verified*', the 
flow proceeds to step S3 12, and executes the program. 

Fig. 6 illustrates the processing contents at the authentication server 4 side 
20 according to the second disk ID verification system. 

In step S402, following establishing a connection with the entertainment 
apparatus main unit, the host server 4 receives the disk ID and the device ID of the 
apparatus main unit. The disk ID is that read from the disk in step S302 in Fig. 5 and 
transmitted in step S308, and the device ID is also that transmitted in step S308. 
25 In step S403, judgment is made regarding whether or not the received disk ID 

exists within the disk IDs accumulated in the user database of the authentication server 
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4. In the event that this does not exist, the disk is judged as being used for the first 
time. Accordingly, the combination of the received disk ID and device ID are 
tabulated and accumulated (registered) in the user database 5 as user information in step 
S404. Next, in step S405, the verification processing described with reference to Fig. 
5 can be realized by recording the disk ID and device ID in a mutually-correlated 
manner in the memory card 11 or the like connected to the apparatus main unit 1 of the 
user 

In step S406, the authentication server 4 transmits a password for the disk 
being used to the apparatus main unit 1 . This password is a secret key which only the 
owner of the disk can know, and as described later, is used for confirming intent of the 
user. This passwords is preferably output on the screen of the apparatus main unit 1 
which the user uses. The user can write down the password and inform others of the 
password when lending others the disk, so that others can use the disk as well. 
Subsequently, in step S414, a program execution permission command is transmitted to 
the entertainment apparatus main unit. 

In step S403, in the event that the received disk ID matches the registered disk 
ID, the received device ID is compared with the device ID in the database 
corresponding to the disk ID in step S407 to see of these match, and in step 3408, 
judgment is made regarding whether or not the two match. Data made up of the 
combination of the disk ID and device ID is accumulated in the user database 5 for all 
disks that have been used even once, so in this step S408, judgment is passed regarding 
whether or not the device ID corresponds to the disk ID. Thus use of secondhand 
articles can be eliminated. In the event of replacing the memory card 11 or in the 
event that the data of the disk ID and device ID recorded in the memory card is deleted, 
in step S409, the authentication server 4 transmits data of the combination of the disk 
ID and device ID to the entertainment apparatus main unit for recording in the memory 
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card. Subsequently, in step S414, a program execution permission command is 
transmitted to the entertainment apparatus main unit. 

In the event that the disk ID exists in the user database 5 but the corresponding 
device ID does not match that in the database, the flow proceeds from step S408 to step 
5 S410, and a password input request is transmitted to the entertainment apparatus main 
unit 1. This input request is displayed on a monitor (not shown) connected to the 
apparatus main unit 1. In step S411, judgment is made regarding whether or not the 
password received from the user is valid. In the event that this is valid, the flow 
proceeds to step S412, and a new password is issued and transmitted for the borrower or 

10 the like of the disk. Program execution rejection commands can be avoided by the 
disk borrower or the like inputting this password when borrowing the disk from the disk 
owner under agreement. This means that the disk borrower does not necessarily have 
to also borrow the memory card 1 1 from the disk owner along with the disk 2. Also, in 
step S412, the password unique to the disk issued to the disk owner is updated. The 

15 updated password is transmitted to the disk owner. Thus, widespread circulation of 
secondhand articles can be avoided. 

Following step S412, in step S414 the authentication server 4 transmits a 
program execution permission command to the entertainment apparatus main unit. 

In the event that judgment is made in step S411 that the password received 

20 from the user is not valid, the flow proceeds to step S413, and authentication server 4 
transmits a program execution rejection command to the entertainment apparatus main 
unit. 

In the above-mentioned embodiments of the first disk ID verification system 
and the second disk ID verification system, the user make his own entertainment 
25 apparatus 1 read a program out of a recording medium such as an optical disk at hand. 
However, the present invention is not limited to this way. For example, in event that a 
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recording medium given with a disk ID is remotely located, after authentication thereof 
is done by remotely controlling to execute the first or second disk ID verification 
system, a program stored in the recording medium may be downloaded. Alternatively, 
in event that a recording medium given with a disk ID is remotely located, after a 
5 program stored in the recording medium is be downloaded, authentication thereof may 
be done by executing the first or second disk ID verification system, and then the 
program may be executed. 

Thus, according to the present invention, a computer system, having a 
verification system for verifying whether or not recording mediums such as optical 
1 0 disks are being used in an unauthorized manner, can be provided. 

Further, according to the present invention, a method for using a computer 
system having a verification system for verifying whether or not recording mediums 
optical disks are being used in an unauthorized manner can be provided. 
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